Static task
static1
Behavioral task
behavioral1
Sample
RetailOneExportadorDatos.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
RetailOneExportadorDatos.exe
Resource
win10v2004-20230220-en
General
-
Target
RetailOneExportadorDatos.exe
-
Size
95KB
-
MD5
f50cf661474181e217f2d4ee6cab1a66
-
SHA1
13182ebd5d5f27afa6edb83642966285666e7a4f
-
SHA256
208ca6c42d0f7bf68e5424655734393c4d92b05962fb1e9f06cf38ad2241e4ad
-
SHA512
b2669a02ad0326934c969a0271c87e60895a279cc8ed1697989d3484a6b784ee73e57062f61e9516f819b43beba3569647cd337dca42db901e037c1276145136
-
SSDEEP
1536:ztVgzVBBzl56T4QSEg7QS2L0WQo2DPegRRHpqoPAp:zN4sg7+L1QDPegvXYp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RetailOneExportadorDatos.exe
Files
-
RetailOneExportadorDatos.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ